Forum Discussion

djshaunvt's avatar
djshaunvt
Copper Contributor
Nov 01, 2022

Windows Desktop Is Suddenly Broken Connecting With Hostname

Hi all.   I would be so greatfull if someone can share their knowledge with me because I have tried just about everything to solve this issue we are having for about 2 weeks now.   When connectin...
Active Directory
management
networking
Windows Server
gmalewis's avatar
gmalewis
Copper Contributor
Nov 21, 2022

djshaunvt

Thank you so much for posting the fix you found!

I've been seeing this pop up on random computers throughout my org. Here are my symptoms:
- RDP attempt to Hostname results in "Logon failed" message
- RDP attempt to IP works normally
- DNS resolves fine for every affected computer I've seen so far
- User account never locks out despite "logon failed" notice

 

I don't have an affected computer I can test with at the moment, but I'm hopeful those updates will help.

Luis_E_Mendes's avatar
Luis_E_Mendes
Copper Contributor
Nov 28, 2022
gmalewis
I have the same problem. Sometimes it works, sometimes it doesn't. Whenever it fails, it's by the DNS hostname.
By IP it works!
Some help?
  • djshaunvt's avatar
    djshaunvt
    Copper Contributor
    Nov 29, 2022

    Luis_E_Mendes 

     

    After lots or researching there doesnt seem to be a way to go forward as Microsoft has hit the cut over switch with the latest November updates with regards to the way DOMAIN Controllers communicate using Kerboros. The only way I see is to is to update all domain controllers with the latest updates so those wont have an issue with clients connecting to those sites. Up until windows Server 2012 you will be ok as updates are still sent out. But like with some of our sites where 2008r2 DC exist we have to upgrade them or signing up with Micorosoft to carry on receiving updates for our Server 2008R2 Domain Controllers. The out Of band updates at the time don't seem to install as the Windows Versions have changed it. What I have found is just updating all the latest Domain Controllers (Server 2012 r2 Upwards all is fine again EXCEPT the sites with the older 2008R2 Domain Controllers due to them not receiving updates anymore.. Hope this makes sense.

     

    I came to the conclusion that this was the issue as below:

     

    So Microsoft gave us the options of registry keys in the beginning to see how our environments would be affected and to prepare.. But if you read carefully the latest Updates in September / November this year changed the state to fully migrated and took away all options of the registry key they provided in the beginning.

     

    https://www.virtualizationhowto.com/2022/02/domain-controller-pacrequestorenforcement-registry-key-enable-audit-and-enforcement/

Resources